ICT Compliance Expert (Poland/Remote)

ZEN.COM is a smart financial app designed for your everyday life – at home and on the go. We make payments, online shopping, and personal finance management fast, secure, and effortless. With ZEN.COM, you can enjoy cashback on purchases, full control over your spending, and peace of mind thanks to purchase protection. A built-in multi-currency account lets you spend abroad or shop internationally with great exchange rates and no hidden fees.

We are looking for an ICT Compliance Expert to support the implementation, maintenance, and monitoring of ICT-related regulatory and compliance requirements across our fintech organization.
The role will be responsible for translating applicable regulatory requirements, standards, and internal policies into clear obligations, implementation expectations, and evidence requirements. The successful candidate will work closely with Cyber Security, ICT Risk, IT, Engineering, Operations, and Legal or Compliance teams to ensure that relevant requirements are understood, implemented by the appropriate owners, documented, and monitored.
The position requires a structured and pragmatic approach to regulatory compliance, with a strong understanding of technology environments and the ability to work effectively with technical stakeholders.
This is a specialist compliance role focused on regulatory interpretation, compliance coordination, evidence management, and ongoing compliance monitoring. It is not intended to replace the operational ownership of technical controls or the independent assurance responsibilities of Internal Audit.

Requirements:

• Experience in ICT compliance, regulatory compliance, technology governance, information security compliance, or a related field.
• Experience in fintech, payments, banking, or another regulated financial services environment.
• Understanding of ICT environments, information security principles, technology operations, and the practical implementation of technical and organizational controls.
• Experience interpreting regulatory requirements and translating them into actionable internal obligations.
• Practical experience conducting compliance assessments, gap analyses, control mapping, and remediation tracking.
• Experience maintaining policies, procedures, compliance registers, and supporting evidence.
• Understanding of the relationship between regulatory obligations, internal controls, operational processes, and technical implementation.
• Familiarity with financial services regulatory requirements, particularly DORA where applicable.
• Knowledge of relevant security standards and frameworks, such as ISO 27001, NIST CSF, and CIS Controls.
• Ability to collaborate with technical teams and understand how regulatory requirements apply to real systems and operational processes.
• Ability to manage multiple regulatory obligations and deadlines in a changing regulatory environment.
• Professional proficiency in English.
• We would appreciate it if you could share your Gallup test or similar assessment results, if available. You can find a dedicated link in the application form on the next page.

Nice to have:

• Experience supporting DORA implementation or maintaining a regulatory obligations register.
• Familiarity with PCI DSS, GDPR, EBA guidance, or other requirements relevant to the organization's activities.
• Experience preparing evidence for regulatory inspections, external assessments, or compliance reviews.
• Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, or other compliance-related qualifications.

Responsibilities:

• ICT Regulatory Requirements: Identify, interpret, and maintain an up-to-date view of applicable ICT-related regulatory requirements, standards, and obligations relevant to the organization's business model.
• Regulatory Change Management: Monitor relevant regulatory developments and assess their potential impact on the organization's technology, security, operational processes, and documentation.
• Compliance Framework: Develop, maintain, and continuously improve the ICT compliance framework, including procedures, compliance methodologies, obligations registers, and supporting documentation.
• Requirements Mapping: Translate regulatory obligations into clear internal requirements and map them to relevant policies, processes, controls, and accountable owners.
• Compliance Assessments: Coordinate periodic assessments to determine whether relevant ICT requirements have been implemented and whether supporting evidence is available and adequate.
• Compliance Gap Analysis: Identify gaps between regulatory expectations and current practices, document findings, agree remediation plans with responsible teams, and track progress.
• Evidence and Documentation Management: Ensure that appropriate evidence of compliance is maintained, organized, traceable, and available for management reviews, regulatory requests, and external assessments.
• Policy and Standard Management: Coordinate the review and maintenance of ICT-related policies, standards, procedures, and control documentation in collaboration with Cyber Security, ICT Risk, and relevant business owners.
• DORA Compliance Support: Support the assessment and ongoing monitoring of applicable DORA requirements, including ICT risk management, incident-related obligations, resilience testing, third-party ICT risk, and relevant governance and reporting requirements.
• Third-Party Compliance: Support compliance assessments relating to ICT service providers, outsourcing arrangements, contractual requirements, and applicable regulatory obligations.
• Regulatory and External Assessments: Coordinate responses to regulatory inquiries, external compliance reviews, and assurance activities related to ICT, working with relevant subject matter experts and control owners.
• Management Reporting: Prepare clear reports on compliance status, identified gaps, remediation progress, upcoming regulatory changes, and areas requiring management attention.
• Stakeholder Coordination: Work with ICT Risk, Cyber Security, IT, Engineering, Operations, Legal, and broader Compliance teams to establish clear responsibilities and consistent approaches to compliance.
• Continuous Improvement: Improve the efficiency and reliability of compliance processes, including regulatory mapping, evidence collection, control documentation, and remediation tracking.

What we offer:

• Real influence on shaping the ZEN.COM.
• Work in an environment where innovation and effectiveness truly matter.
• Competitive salary and flexible working conditions.
• Private medical healthcare.
• Internal and external training opportunities.